Redundant Activation Control with Priority-Based Network Failover
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Safety-critical systems, such as semi-automated vehicle control systems, face challenges in maintaining reliable communication and command prioritization across redundant communication networks, leading to uncertainty and reduced operational quality during failures, as existing systems often lack synchronized failover processes and clear priority regulations between primary and secondary control units.
Innovation Solution
The activation system connects at least one receiving device to two independent communication networks, with transmitting modules prioritizing messages and coordinating to ensure that messages from a primary control unit are processed over others, even after network failures, and includes a tertiary module for further redundancy, allowing for adaptable operation modes and reduced uncertainty.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If redundant communication networks are used for safety-critical systems, then reliability is improved, but uncertainty in message processing increases during failures
Solution Approach 1:
The system establishes clear priority relationships between transmitting modules before failures occur. The receiving device is pre-configured to recognize and process messages from primary transmitting modules with higher priority than secondary modules, ensuring deterministic behavior during normal operation and failure scenarios without requiring complex real-time decision-making
Solution Approach 2:
The receiving device acts as an intermediary that filters and selects messages based on predefined priority criteria. It processes only the highest priority valid message from multiple transmitting modules, eliminating uncertainty by automatically discarding lower priority messages during failures while maintaining system reliability through redundant communication paths
2Reliability
If multiple transmitting modules operate independently on redundant networks, then reliability is improved, but coordination complexity increases
Solution Approach 1:
Each transmitting module operates with distinct local characteristics and priorities assigned to its communication channels. The primary transmitting module uses high-priority channels while secondary modules use lower-priority channels, allowing independent operation without complex coordination mechanisms. The receiving device locally identifies and processes messages based on these predetermined quality differences
Solution Approach 2:
Priority relationships and communication channel assignments are predetermined and configured before system operation. This preliminary arrangement eliminates the need for dynamic coordination protocols during runtime, reducing coordination complexity while maintaining reliability through the predefined hierarchical structure
3Reliability
If failover processes are implemented between primary and secondary control units, then reliability is improved, but operational quality decreases during transitions
Solution Approach 1:
The receiving device is pre-configured with knowledge of multiple valid transmitting modules and their priority relationships before failures occur. This allows immediate switching to secondary modules without transition delays or quality degradation, as the priority framework is already established and requires no reconfiguration during failover
Solution Approach 2:
The priority-based message processing framework ensures continuous operational quality during failover transitions. The receiving device maintains its message selection criteria unchanged during transitions, seamlessly processing messages from secondary modules with the same deterministic behavior, thus avoiding operational quality degradation while ensuring system availability
Data Source
AI summary
An activation system for at least one receiving device that is redundantly activatable via a first communication network and via at least one second communication network that is independent of the first communication network. The activation system includes at least two transmitting modules, each of which is designed to generate messages for the receiving device and to transmit them to the receiving device via at least one of the communication networks. At least one transmitting module is connectable to both communication networks, and the transmitting modules are coordinated with one another and/or with the receiving device in such a way that messages from one transmitting module are to be transmitted via a communication network and/or processed by the receiving device with priority over messages from another transmitting module.